Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 01:59:43.476 00:00:11.804 TCP 12.102.0.1:42668 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:00:45.314 00:00:11.802 TCP 12.102.0.1:55140 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:01:47.152 00:00:11.808 TCP 12.102.0.1:57724 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:02:53.182 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:02:53.307 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:02:53.130 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:02:53.267 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:02:53.205 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:02:53.455 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:02:53.086 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:02:48.998 00:00:11.802 TCP 12.102.0.1:45360 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:58:25.153 00:06:00.091 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 02:03:50.837 00:00:11.801 TCP 12.102.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:59:25.155 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 02:04:52.684 00:00:11.802 TCP 12.102.0.1:45370 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:05:54.518 00:00:11.760 TCP 12.102.0.1:35088 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:06:56.321 00:00:11.802 TCP 12.102.0.1:54986 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:07:53.273 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:07:53.335 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:07:53.198 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:07:53.471 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:07:53.295 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:07:53.594 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:07:53.314 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:07:58.169 00:00:11.769 TCP 12.102.0.1:38956 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:08:59.982 00:00:11.809 TCP 12.102.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:10:01.830 00:00:11.816 TCP 12.102.0.1:47444 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:05:25.155 00:06:00.091 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 02:11:03.688 00:00:11.760 TCP 12.102.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:06:25.158 00:06:00.086 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 02:12:05.486 00:00:11.811 TCP 12.102.0.1:58516 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:12:53.098 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:12:53.323 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:12:53.500 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:12:53.369 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:12:53.122 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:12:53.431 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:12:53.380 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:13:07.336 00:00:11.817 TCP 12.102.0.1:42302 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:14:09.189 00:00:11.767 TCP 12.102.0.1:44384 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:15:10.994 00:00:11.760 TCP 12.102.0.1:59506 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:16:12.792 00:00:11.795 TCP 12.102.0.1:36178 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:12:25.156 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 02:17:14.627 00:00:11.769 TCP 12.102.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:17:53.511 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:17:53.293 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:17:53.488 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:17:53.280 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:17:53.543 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:17:53.354 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:17:53.256 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:13:25.159 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 02:18:16.435 00:00:11.805 TCP 12.102.0.1:44692 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:19:18.273 00:00:11.761 TCP 12.102.0.1:34628 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:20:20.085 00:00:11.803 TCP 12.102.0.1:60304 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:21:21.930 00:00:11.809 TCP 12.102.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:22:23.781 00:00:11.801 TCP 12.102.0.1:58124 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:22:53.660 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:22:53.710 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:22:53.481 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:22:53.418 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:22:53.432 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:22:53.441 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:22:53.395 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:23:25.622 00:00:11.800 TCP 12.102.0.1:46316 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:19:25.157 00:06:00.093 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 02:24:27.462 00:00:11.874 TCP 12.102.0.1:47856 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:20:25.161 00:06:00.088 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 02:25:29.392 00:00:11.770 TCP 12.102.0.1:37526 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:26:31.201 00:00:11.758 TCP 12.102.0.1:34574 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:27:32.995 00:00:11.806 TCP 12.102.0.1:39994 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:27:53.768 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:27:53.851 00:00:00.025 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:27:53.704 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:27:53.732 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:27:53.793 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:27:53.455 00:00:00.024 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:27:53.711 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:28:34.839 00:00:11.852 TCP 12.102.0.1:35362 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:29:36.729 00:00:11.795 TCP 12.102.0.1:46384 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:30:38.563 00:00:11.794 TCP 12.102.0.1:48042 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:26:25.161 00:06:00.092 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 02:31:40.397 00:00:11.767 TCP 12.102.0.1:55080 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:27:25.164 00:06:00.085 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 02:32:53.544 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:32:53.884 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:32:53.737 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:32:53.617 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:32:53.630 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:32:53.695 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:32:53.595 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:32:42.204 00:00:11.799 TCP 12.102.0.1:40994 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:33:44.077 00:00:11.803 TCP 12.102.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:34:45.918 00:00:11.828 TCP 12.102.0.1:55936 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:35:47.786 00:00:11.802 TCP 12.102.0.1:37356 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:36:49.631 00:00:11.801 TCP 12.102.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:37:53.906 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:37:53.654 00:00:00.024 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:37:53.789 00:00:00.021 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:37:53.928 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:37:53.824 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:37:54.047 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:37:54.023 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:37:51.466 00:00:11.801 TCP 12.102.0.1:59714 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:33:25.165 00:06:00.089 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 02:38:53.306 00:00:11.814 TCP 12.102.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:34:25.168 00:06:00.085 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 02:39:55.160 00:00:11.863 TCP 12.102.0.1:33546 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:40:57.078 00:00:11.800 TCP 12.102.0.1:38906 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:41:58.918 00:00:11.775 TCP 12.102.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:42:53.852 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:42:53.963 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:42:53.875 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:42:53.804 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:42:54.132 00:00:00.012 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:42:54.010 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:42:54.113 00:00:00.029 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:43:00.732 00:00:11.801 TCP 12.102.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:44:02.576 00:00:11.800 TCP 12.102.0.1:49784 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:45:04.411 00:00:11.802 TCP 12.102.0.1:45246 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:40:25.172 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 02:46:06.252 00:00:11.761 TCP 12.102.0.1:45658 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:41:25.174 00:06:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 02:47:08.085 00:00:11.803 TCP 12.102.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:47:53.732 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:47:53.968 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:47:53.929 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:47:53.948 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:47:54.110 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:47:54.158 00:00:00.028 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:47:54.037 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:48:09.927 00:00:12.207 TCP 12.102.0.1:33476 -> 1.101.0.1:3000 15 1926 1 2025-09-04 02:49:12.175 00:00:11.801 TCP 12.102.0.1:52668 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:50:14.027 00:00:11.793 TCP 12.102.0.1:50472 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:51:15.862 00:00:11.811 TCP 12.102.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:47:25.173 00:06:00.084 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-09-04 02:52:17.712 00:00:11.799 TCP 12.102.0.1:46302 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:52:54.279 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:52:54.211 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:52:54.315 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:52:54.080 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:52:54.301 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:52:54.184 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:52:54.195 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:48:25.176 00:06:00.080 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-09-04 02:53:19.548 00:00:11.856 TCP 12.102.0.1:54228 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:54:21.444 00:00:11.809 TCP 12.102.0.1:46884 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:55:23.289 00:00:11.759 TCP 12.102.0.1:57388 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:56:25.086 00:00:11.799 TCP 12.102.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:57:26.927 00:00:11.816 TCP 12.102.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:57:54.191 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-09-04 02:57:54.292 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-09-04 02:57:54.337 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:57:54.277 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-09-04 02:57:54.213 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-09-04 02:57:54.286 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-09-04 02:57:54.028 00:00:00.026 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-09-04 02:58:28.779 00:00:12.248 TCP 12.102.0.1:55836 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 158, total bytes: 123188, total packets: 1122, avg bps: 272, avg pps: 0, avg bpp: 109 Time window: 2025-09-04 01:58:25 - 2025-09-04 02:58:41 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0039s User: 0.0013s Wall: 0.0023s flows/second: 69269.4 Runtime: 0.0023s